PHPAML

Documentation · Chapter 18

Create and verify a production archive.

aml build tests the project, validates the Web entry configuration, excludes secrets and development material, then creates an archive, manifest, and SHA-256 checksum.

Every lesson starts from the problem, explains the mechanism, then gives a concrete verification.

LESSON OBJECTIVE

What you will be able to do

Build a minimal production archive and independently verify its manifest and integrity evidence.

Test before packaging

By default, a failing test stops build. --skip-tests is an exceptional conscious choice, never the normal shortcut.

phpaml — zsh
aml test
aml build
ls output/
sha256sum output/*.zip

Inspect exclusions

Only runtime code and public assets belong in the archive. Tests, caches, output, deliverables, and local state are excluded.

Verify checksum and manifest

The manifest records paths and fingerprints. Verify the ZIP against the published checksum before transferring or installing it.

CHECKPOINT

Before you continue

Does the archive omit .env, keys, logs, tests, caches, local databases, and deployment history?